PT-2026-47790 · Linux · Linux

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-52904

NVD

In the Linux kernel, the following vulnerability has been resolved:

drm/nouveau: fix nvkm device leak on aperture removal failure

When aperture remove conflicting pci devices() fails during probe, the error path returns directly without unwinding the nvkm device that was just allocated by nvkm device pci new(). This leaks both the device wrapper and the pci enable device() reference taken inside it.

Jump to the existing fail nvkm label so nvkm device del() runs and balances both. The leak was introduced when the intermediate nvkm device del() between detection and aperture removal was dropped in favor of creating the pci device once.

Related Identifiers

CVE-2026-52904

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-52904 · Security Note
• https://git.kernel.org/stable/c/6597ff1d8de3f583be169587efeafd8af134e138 · Note
• https://git.kernel.org/stable/c/843c0247cf21364e33bb5a8ffc9af57107d04d05 · Note
• https://git.kernel.org/stable/c/4404d7d2dda4f3cc84a8fb6ac5417a2afc3b22d6 · Note
• https://git.kernel.org/stable/c/5edd564ccb002ffc830e7818c1c4a992db774678 · Note